35349 matches found
PYSEC-2026-3138 Memory leak in Tensorflow
Impact If a graph node is invalid, TensorFlow can leak memory in the implementation of ImmutableExecutorState::Initialize: cc Status s = params.createkerneln-properties, &item-kernel; if !s.ok item-kernel = nullptr; s = AttachDefs, n; return s; Here, we set item-kernel to nullptr but it is a simp...
MAL-2026-10090 Malicious code in nonenull1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162cd9e0496d35e0500fe084f6011a3e6893182b0fa209502c5d6017ab1138ac The package declares gypfile: true with no native C/C++ sources, and its binding.gyp abuses GYP command-expansion syntax in the sources list — !node...
GHSA-52VM-MXX8-F227
creationtimestamp| type| source ---|---|--- 2026-07-09 16:11:48+00:00| seen| https://gist.github.com/alon710/de8daa287a86509961bb72f2223b1bc8...
CVE-2026-48987
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:17+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-c2f9-4mc8-j656...
CVE-2026-50554
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:10+00:00| published-proof-of-concept| https://github.com/enchant97/note-mark/security/advisories/GHSA-588f-fvcv-xhvf...
CVE-2026-53727
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:05+00:00| published-proof-of-concept| https://github.com/premailer/cssparser/security/advisories/GHSA-9pmc-p236-855h 2026-07-18 00:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquydfuuou2q...
GHSA-GV7V-RGG6-548H
creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:12+00:00| seen| https://t.me/brutsecurity/1117 2026-07-10 00:00:35+00:00| seen| https://t.me/brutsecurity/1117 2026-07-11 16:00:02+00:00| published-proof-of-concept| https://t.me/brutsecurity/1117 2026-07-12 00:00:45+00:00|...
GHSA-5F39-WJPQ-XRRJ vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu, linux-qemu-melange, linux-azure, linux-gcp...
GHSA-5RWX-CQG3-893X vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu, linux-qemu-melange, linux-azure, linux-gcp...
GHSA-QC6F-VG59-3945 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu, linux-qemu-melange, linux-azure, linux-gcp...
GHSA-W8W6-F4MM-HW75 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu, linux-aws, linux-qemu-melange, linux-azure, linux-gcp...
GHSA-2P59-XC6P-6W7C vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu, linux-qemu-melange, linux-azure, linux-gcp...
GHSA-36GR-GW56-G35V vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu, linux-qemu-melange, linux-azure, linux-gcp...
PT-2026-56799
A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation of the argument orderId leads to improper control of resource identifiers. The attack can be initiated remotely. The...
CVE-2026-59831: Inclusion of Functionality from Untrusted Control Sphere
GitHub CLI gh is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...
PT-2026-57017
The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3. The vulnerability exists in the loginpress on github login function, which blindly trusts the first element profile0'email' of the array returned b...
PT-2026-57006
Name of the Vulnerable Software and Affected Versions GitHub CLI gh versions 2.10.0 through 2.95.0 Description Connecting to a malicious Codespace using the gh codespace jupyter command can lead to command execution. This occurs because the tool opens a JupyterLab URL provided by a process within...
CVE-2026-53600
creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:10+00:00| published-proof-of-concept| https://github.com/dignifiedquire/async-tar/security/advisories/GHSA-35rm-7j9c-2f7m...